That's correct that it doesn't add many features, the big thing it does is improve performance and simplify the backend. While not visible and apparent, it was greatly needed. We've found that the permissions system alone does 90% less queries.. and when the system spends half its time there.. ;)

And there were a couple permissions holes that we closed.